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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions and listings of claims in the application: 
Listing of Claims 

1 . (Previously Presented) A method of access control for a movable 
network managed by a mobile router, wherein said mobile router is interconnected 
through a bi-directional link with a mobility anchoring agent that anchors the network 
mobility for the mobile router, said method comprising the steps of: 

filtering at the mobility anchoring agent, downlink packets to said mobile router to 
eliminate unauthorized downlink packets before the packets are transmitted over an air 
interface; and 

filtering at said mobile router, uplink packets to said mobility anchoring agent to 
eliminate unauthorized uplink packets before the packets are transmitted over the air 
interface. 

2. (Original) The method of claim 1 , wherein said mobility anchoring 
agent is a home agent in a home network of said mobile router. 

3. (Original) The method of claim 1 , wherein said mobility anchoring 
agent is a local forwarding agent in a visited network. 

4. (Original) The method of claim 1 , wherein said mobility anchoring 
agent runs a NEMO-based (Network Mobility) mobility support protocol with said mobile 
router. 

5. (Previously Presented) The method of claim 4, wherein said mobile 
router is interconnected with said mobility anchoring agent through a NEMO bi- 
directional tunnel, and the mobility anchoring agent filters downlink packets before said 
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NEMO bi-directional tunnel, and the mobile router filters uplink packets before said 
NEMO bi-directional tunnel. 

6. (Previously Presented) The method of claim 1 , wherein said step of 
filtering downlink packets at the mobility anchoring agent includes checking headers of 
downlink IP packets that traverse an access control point in said mobility anchoring 
agent, and said step of filtering uplink packets at said mobile router includes checking 
headers of uplink IP packets that traverse an access control point in said mobile router. 

7. (Previously Presented) The method of claim 1 , further comprising the 
step of provisioning a first access control module at said mobility anchoring agent and a 
second access control module at said mobile router with provisioning information from 
an access control source. 

8. (Previously Presented) The method of claim 7, wherein said 
provisioning step comprises the steps of: 

transferring provisioning information for the first and second access control 
modules from said access control source to said mobility anchoring agent; and 

subsequently forwarding provisioning information for the second access control 
module from said mobility anchoring agent to said mobile router over the bi-directional 
link. 

9. (Previously Presented) The method of claim 8, wherein said 
provisioning information for the second access control module includes provisioning 
information related only to the uplink from said mobile router to said mobility anchoring 
agent. 

10. (Canceled) 
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1 1 . (Previously Presented) The method of claim 7, wherein said access 
control source is implemented in an Authentication, Authorization and Accounting (AAA) 
client, and provisioning information related to a node in said movable network is 
transferred from an AAA server associated with the home network of said node to said 
AAA client and the access control source. 

12-15. (Canceled) 

1 6. (Previously Presented) An arrangement for access control for a 
movable network managed by a mobile router, wherein said mobile router is 
interconnected through a bi-directional link with a mobility anchoring agent that anchors 
the network mobility for the mobile router, said arrangement comprising: 

means for filtering at the mobility anchoring agent, downlink packets to said 
mobile router to eliminate unauthorized downlink packets before the packets are 
transmitted over an air interface; and 

means for filtering at said mobile router, uplink packets to said mobility anchoring 
agent to eliminate unauthorized uplink packets before the packets are transmitted over 
the air interface. 

17-18. (Canceled) 

19. (Original) The arrangement of claim 16, wherein said mobile router 
and said mobility anchoring agent are configured to run a NEMO-based (Network 
Mobility) mobility support protocol. 

20. (Previously Presented) The arrangement of claim 19, wherein said 
mobile router is interconnected with said mobility anchoring agent through a NEMO bi- 
directional tunnel, and said filtering means at said mobility anchoring agent filters the 
downlink packets before said NEMO bi-directional tunnel, and said filtering means at 
said mobile router filters the uplink packets before said NEMO bi-directional tunnel. 
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21-30. (Canceled) 

31 . (Previously Presented) A mobility anchoring agent for anchoring 
network mobility for a mobile router that manages a movable network, wherein said 
mobility anchoring agent comprises: 

means for interconnecting with said mobile router through a bi-directional link; 

and 

means for monitoring and filtering downlink packets to said mobile router to 
eliminate unauthorized downlink packets before the downlink packets are transmitted 
over the bi-directional link. 

32. (Original) The mobility anchoring agent of claim 31 f wherein said 
mobility anchoring agent is configured to run a NEMO-based (Network Mobility) mobility 
support protocol with said mobile router. 

33. (Previously Presented) The mobility anchoring agent of claim 32, 
wherein the means for interconnecting with said mobile router includes a NEMO bi- 
directional tunnel, and said means for monitoring and filtering filters the downlink 
packets before said NEMO bi-directional tunnel. 

34. (Previously Presented) The mobility anchoring agent of claim 31 , 
wherein said means for monitoring and filtering checks headers of packets that traverse 
an access control point in said mobility anchoring agent. 

35. (Previously Presented) The mobility anchoring agent of claim 31 , 
further comprising: 

means for receiving provisioning information for access control at both said 
mobility anchoring agent and said mobile router from an access control source; and 

means for forwarding provisioning information for access control at said mobile 
router to said mobile router. 
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36. (Original) The mobility anchoring agent of claim 35, wherein said 
provisioning information for access control at said mobile router includes information 
related only to the uplink from said mobile router to said mobility anchoring agent 

37. (Canceled) 

38. (Previously Presented) An access control enforcement module for 
operation with a mobility anchoring agent that anchors network mobility for a mobile 
router managing a movable network, said mobile router being interconnected through a 
bi-directional link with said mobility anchoring agent, wherein said access control 
enforcement module includes means for monitoring and filtering downlink packets to 
said mobile router to eliminate unauthorized downlink packets before the downlink 
packets are transmitted over the bi-directional link. 
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